Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4xAOHAGQWJlzA82BbEYPedN-lZU.roa
File: 4xAOHAGQWJlzA82BbEYPedN-lZU.roa (raw, json)
Hash identifier: 35hBfBNTsxKNECwj2mlVq0bkEK1GkKJbNs8DwdvV0G4=
Subject key identifier: E3:10:0E:1C:01:90:58:99:73:03:CD:81:6C:46:0F:79:D3:7E:95:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0F6D40DCFB7893245D099F7232025BD0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4xAOHAGQWJlzA82BbEYPedN-lZU.roa
Signing time: Wed 24 Apr 2024 09:26:09 +0000
ROA not before: Wed 24 Apr 2024 09:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.88.90.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 08:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:6d:40:dc:fb:78:93:24:5d:09:9f:72:32:02:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 09:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3100e1c019058997303cd816c460f79d37e9595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f2:1e:ef:49:70:58:8f:ee:3d:18:5a:7b:1d:
cb:9b:64:86:45:fe:a7:fa:64:d8:71:16:1d:26:3b:
39:71:2f:90:06:06:46:40:65:f5:0a:a9:09:38:be:
ed:1d:4d:92:a5:dd:2f:f4:05:56:f7:e4:4c:10:51:
f8:a7:c0:d9:e3:c3:b5:b5:88:e6:e1:56:0b:a7:7a:
91:51:6a:c4:a1:2a:9f:b7:d0:85:23:2b:5e:b6:cd:
ce:26:9d:c9:fb:c2:ba:4c:01:0a:4c:fe:cf:51:65:
f2:e7:c2:80:88:ed:43:0f:1f:80:41:79:e4:14:19:
94:66:cc:c9:1a:09:91:20:20:1f:09:9c:8b:ad:72:
d6:c4:6e:78:4d:9f:26:61:38:1f:74:f8:25:80:3e:
9d:16:ea:3e:e0:cf:2e:75:31:a4:06:75:c1:dd:90:
fc:c2:7d:7d:3c:70:14:b0:9c:18:99:cb:d9:6a:5e:
92:66:f6:a3:76:6e:52:a5:27:c9:89:88:17:97:8c:
e6:94:93:12:5c:ed:b7:cd:a1:c5:83:4a:47:b0:78:
01:a7:e2:9a:de:1b:b6:e2:ac:47:91:01:0d:db:a0:
cc:72:e3:b1:be:02:d7:40:a1:e8:58:f8:9a:9f:56:
be:d3:bb:3b:ac:24:44:20:8e:40:93:1e:d8:26:14:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:10:0E:1C:01:90:58:99:73:03:CD:81:6C:46:0F:79:D3:7E:95:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4xAOHAGQWJlzA82BbEYPedN-lZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
87.120.84.0/24
87.121.105.0/24
94.156.10.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
23:46:42:0d:3c:ed:5a:d2:67:23:c6:2d:48:e8:aa:be:92:4e:
7d:34:01:7e:a0:19:a1:6a:0f:3e:cd:a0:d1:a8:80:75:df:88:
41:67:31:a0:ee:26:5a:ca:b7:76:56:b5:89:da:d7:7d:07:50:
3f:4c:74:0f:3d:9e:8e:ee:1d:14:42:fe:d0:76:52:8e:ed:c4:
aa:84:e6:7e:a2:d4:36:f7:89:ac:c7:85:a5:f5:e0:4e:89:ec:
2a:84:f4:e8:91:72:ce:f8:b5:ec:70:c7:61:64:8b:64:7f:d0:
38:2a:17:47:ba:d1:ba:56:61:65:e7:8b:a9:74:7f:75:64:35:
cf:cf:d6:a6:9a:e6:5a:e5:4e:db:08:81:93:97:01:77:fe:32:
19:63:89:6d:c2:3a:db:48:30:1c:4a:a6:44:e9:0b:2e:ff:51:
0d:47:cb:fb:e4:c1:30:b9:be:b1:18:2b:41:18:6f:aa:29:d2:
ac:10:a2:9d:cb:ae:00:af:7e:4a:04:82:27:22:7b:1a:f2:1c:
f8:97:ba:85:75:fb:2b:6c:59:ee:09:df:55:ef:ca:ae:1d:b1:
41:13:e4:79:d4:53:c6:e6:2c:79:70:3e:0f:8b:98:27:7f:f3:
2c:75:75:cd:eb:45:ba:0c:3a:84:d1:bc:eb:10:42:12:c8:6e:
11:ba:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 11:27:27 2024 by rpki-client on console-fra.rpki-client.org